10/24/07 WED 14:41 FAX 312 984 7700 



MWE CHICAGO 



EI006 



In re Appln. of Bishop, et aL 
App.No. 10/821,379 

CLAIMS 

Please amend the claims as follows: 
Claims i -4 (canceled). 

Claim 5 (currently amended) A method for protecting a network server from being used as the 
basis of an attack on a network client, the method comprising: 

a. restricting access to said network server to a trusted portion of said network server 
for at least a selected protocol; 

b. scanning said trusted portion of said network server for executable commands 
particular charact e r s, said executable commands particular charact e r s being 
associated with said selected protocol; and, 

c. editing each of removing said executable commands particular characters such 
that said executable commands will not be executed b v the network server the 
security risk poncd by paid s elected character is reduced . 

Claim 6 (canceled) 

Claim 7 (currently amended) The method of Claim 5, further comprising replacing smd 

particular characters within said executable commands with bortign charao t oro such that-a 
security risk posod by said a e l e ctod protocol io reduc e d . 

Claim 8 (currently amended) The method of Claim 5, wherein said executable command? 

include particular characters and said characters are hostile characters and wherein if a 
request contains any of said hostile characters, the request is rejected. 

Claim 9 (currently amended) The method of Claim 5, further comprising logging said 
executable commands particular charact e rs to form a security log. 

Claim 1 0 (currently amended) The method of Claim 9, further comprising reviewing said 
security log to determine whether said executable commands p articular character s are 
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hostile. 

Claim 1 1 (original) The method of Claim 5, wherein said protection of the network server is 
accomplished during an electronic purchase transaction. 

Claim 12 (original) The method of Claim 1 1, wherein the electronic purchase transaction is 
conducted using a digital wallet. 

Claims 13-42 (cancelled). 

Claim 43 (currently amended) A computer-implemented method for protecting a network 
server from being used as the basis of an attack on a network client, the method 
comprising: 

a. receiving a request for a connection at said server from said network client; 

b. scanning a trusted portion of said network server for executable commands 
particular c haract e rs associated with a protocol; 

c. removing each of said executable commands particular charact e rs such that the 
security risk posed by said executable commands partioular characters is 
eliminated reduced ; 

d. verifying that any response from said network server to said network client is void 
of said executable commands partioular charactoro ; and 

e. providing said response from said network server to said network client 

Claim 44 (previously presented) The method of Claim 43 further comprising restricting access 
to said network server for said protocol to said trusted portion of said network server. 

Claim 45 (currently amended) The method of Claim 43 further comprising replacing said 

particular characters within said executable commands with benign characters ouch that a 
security risk posod by said Delected protocol ia reduced 

Claim 46 (previously presented) The method of Claim 43 wherein said protocol comprises 
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javascript 

Claim 47 (currently amended) The method of Claim 43 further comprising logging said 
executable commands particular charact o r s to form a security log. 

Claim 48 (currently amended) The method of Claim 47 further comprising reviewing said 
security log to determine whether said executable commands particular charact e rs are 
hostile. 

Claim 49 (previously presented) The method of Claim 47 wherein said protection of the 
network server is accomplished during an electronic purchase transaction. 

Claim 50 (previously presented) The method of Claim 49 wherein the electronic purchase 
transaction is conducted using a digital wallet. 
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